Extension WordPress
Vulnérabilités Use Any Font | Custom Font Uploader
Cette page rassemble les failles publiées pour Use Any Font | Custom Font Uploader, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Use Any Font | Custom Font Uploader
4 fiches
Use Any Font <= 6.3.08 – Cross-Site Request Forgery
The Use Any Font plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.08. This is due to missing or incorrect nonce validation on the uaf_trigger_actions() function. This makes it possible for…
*-6.3.08
6.3.09
25/09/2024
Use Any Font | Custom Font Uploader <= 6.2.7 – Cross-Site Scripting
The Use Any Font | Custom Font Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as 'font_key' and 'elements' in versions up to, and including, 6.2.7 due to insufficient input sanitization and…
*-6.2.7
6.2.8
10/05/2022
Use Any Font <= 6.1.7 – Cross-Site Request Forgery to API Key Deactivation
Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin)
*-6.1.7
6.1.8
30/03/2022
Use Any Font <= 6.2.0 – Unauthenticated Arbitrary CSS Appending
The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to send arbitrary CSS which will then be processed by the frontend for…
[*, 6.2.1)
6.2.1
31/01/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.